Bug#718434: Bug#731463: Bug#718434: ca-certificates: should CAcert.org be included?

2013-12-07 Thread Raphael Geissert
Hi Daniel, On Saturday 07 December 2013 01:21:52 Daniel Kahn Gillmor wrote: can we ship CAs marked as disabled by default? my impression is that every CA shipped in ca-certificates right now is enabled automatically unless the user has debconf's priority set to be more verbose than the

Bug#704180: Bug#718434: Bug#731463: Bug#718434: ca-certificates: should CAcert.org be included?

2013-12-07 Thread Daniel Kahn Gillmor
On 12/07/2013 07:54 AM, Raphael Geissert wrote: On Saturday 07 December 2013 01:21:52 Daniel Kahn Gillmor wrote: The other way to maintain the same CA set is for Someoneā„¢ to fix #704180 While I like that solution (having to modify nss to add/remove certs is a PITA), I wonder how trust

Bug#718434: Bug#731463: Bug#718434: ca-certificates: should CAcert.org be included?

2013-12-06 Thread Daniel Kahn Gillmor
On 12/06/2013 07:13 PM, Michael Shuler wrote: #2 - All CAs included in ca-certificates are available to have the trust turned off. If you have a concern about a particular CA and do not trust them, disable that CA. can we ship CAs marked as disabled by default? my impression is that every CA

Bug#718434: Bug#731463: Bug#718434: ca-certificates: should CAcert.org be included?

2013-12-06 Thread Michael Shuler
On 12/06/2013 06:21 PM, Daniel Kahn Gillmor wrote: can we ship CAs marked as disabled by default? I think this would prove to be a rather severe disservice to Debian users, making all SSL connections fail for all software that is or depends on one of the reverse dependencies of

Bug#718434: Bug#731463: Bug#718434: Bug#731463: Bug#718434: ca-certificates: should CAcert.org be included?

2013-12-06 Thread Daniel Kahn Gillmor
On 12/06/2013 08:11 PM, Michael Shuler wrote: On 12/06/2013 06:21 PM, Daniel Kahn Gillmor wrote: can we ship CAs marked as disabled by default? I think this would prove to be a rather severe disservice to Debian users, making all SSL connections fail for all software that is or depends on